Steve St.Laurent
Staff Alumni
A few security vulnerabilities were found in the version of vBulletin and PHP that we were running recently. We do our best to be pro-active on potential vulnerabilities so once I was aware of the issues (yesterday) I discussed it with Robin and we decided to make the changes last night.
I had the entire site down from approximately 1:30 am until 3:30 am eastern time - if you tried to access the site during that time period you would have either gotten error messages or no response at all. I was upgrading PHP and Apache at that time and without those running there's nothing to respond to your requests. Also, many things tie into those programs so it is a complicated upgrade process which is why you may have gotten errors at times.
Starting around 5:00 am eastern I took the forums off line to install an upgraded version of vBulletin as well. We were running on vBulletin v3. 0. 3 which was the most current release up to January 2nd when v3. 0. 4 was released. They released that version to take care of a fairly large list of bugs they had discovered and primarily to close up some security vulnerabilities that had been discovered. Yesterday they discovered yet another vulnerability in 3. 0. 4 and released v3. 0. 5 last night around 3:30am. We are now running on v3. 0. 5. Normally I do not implement new versions when they are first available so that someone else can be the guinea pig. However, since this dealt with security vulnerabilities which could bring the site down I decided it was worth the effort.
Because of the major number of changes that have been made I fully expect that we will run into some bugs. Please report any you might find here and I will do my best to take care of them in a timely manner.
-Steve St. Laurent
Webmaster
I had the entire site down from approximately 1:30 am until 3:30 am eastern time - if you tried to access the site during that time period you would have either gotten error messages or no response at all. I was upgrading PHP and Apache at that time and without those running there's nothing to respond to your requests. Also, many things tie into those programs so it is a complicated upgrade process which is why you may have gotten errors at times.
Starting around 5:00 am eastern I took the forums off line to install an upgraded version of vBulletin as well. We were running on vBulletin v3. 0. 3 which was the most current release up to January 2nd when v3. 0. 4 was released. They released that version to take care of a fairly large list of bugs they had discovered and primarily to close up some security vulnerabilities that had been discovered. Yesterday they discovered yet another vulnerability in 3. 0. 4 and released v3. 0. 5 last night around 3:30am. We are now running on v3. 0. 5. Normally I do not implement new versions when they are first available so that someone else can be the guinea pig. However, since this dealt with security vulnerabilities which could bring the site down I decided it was worth the effort.
Because of the major number of changes that have been made I fully expect that we will run into some bugs. Please report any you might find here and I will do my best to take care of them in a timely manner.
-Steve St. Laurent
Webmaster